agama-project / agama

71%

master: 75%

LAST BUILD ON BRANCH fix_shell_injection

branch: fix_shell_injection

CHANGE BRANCH

x

Reset

Sync Branches

• fix_shell_injection
• SLE-16
• SLE-16-self-update
• SLE-16-self-update-scc
• action_permissions
• adapt_to_v2
• add-check
• add-inst-script
• add-missing-gems
• add-more-libzypp-callbacks
• add-noto-sans-for-cyrillic-script
• add-questions-logging
• add-signature-callbacks
• add_custom_repos
• add_ipconfig_link_local4
• add_ovs_support
• added_mysed_type
• adjust-webpack-config
• after-install-snapshot
• after-release-beta2
• agama-api-v2_network
• agama-api-v2_network-UI
• agama-api-v2_network-backend
• agama-config-generate
• agama-iscsi-service
• agama-new-api
• agama-new-api-actors
• agama-new-api-ci
• agama-new-api-progress
• agama-new-api-traits
• agama-product-modes
• agama-product-registration-fix
• agama-profile-apiurl
• agama-v2_hostname
• agama_config_insecure_rc3
• agama_download_insecure
• always-display-install-button
• api-option
• api-v2
• api-v2-product-selection
• api-v2-progress
• api-v2-storage-reset
• api-v2_network
• auto-insecure
• auto-scripts
• autoinstall_fix
• autologin-schema
• autoyast-iscsi
• autoyast-skip-list
• ay-services-manager-conversion
• better-agama-auto
• better-error-message
• better-logging
• better-testing
• better-url-handling
• better_reg_errors
• bind_interface
• boot-raid
• boot_from_candidate_raid
• bootloader_force_user_input
• bootloader_new_api
• bridge_support
• bsc#1234711
• bsc-1233160
• bsc-1245187
• bsc-1247248
• bsc-1248876
• bsc-1251898
• bsc-1251898-security
• bsc-1257489
• bsc-1258450
• bsc1243795-sle16
• bsc1244697
• bsc1244697_rc3
• bsc1249591
• bug_partitioned_raid
• bug_partitioned_raid_master
• bump-rustc
• cache-control
• cached_software
• cancel-link
• candidate-devices
• catch_no_root
• changes
• check-encryption-password
• check_issues_backend
• checkmedia
• ci-doc-fix-rubygem
• ci_augeas_06
• ci_autoinst_schema
• ci_rust_cache
• clean-up
• clean-up-registration
• cleanup
• cli-offline-validation
• client-id
• clippy
• collect-logs
• configure_console_font
• confirm_format
• conflicts
• coveralls_config
• current_installation_phase_nil
• dasd-dbus-api-v2
• dasd-http-api-v2
• dasd-page-refactoring
• dasd-ui-api-v2
• dbus_nm_versions
• dead-code-cleanup
• debug-product-cache
• default-mode
• default_auto
• delete-proposed-drive
• delete-proposed-partition
• delete-vg
• delete_root_again
• delete_root_beta2
• device-selector-sorting
• dirty-wip-dasd-ui-experiment
• disable-cfg-ci-lint
• disable-self-update
• disable_h264_master
• disable_local_repos
• display-load-error
• distrobox
• dns_priority
• download-api
• drop-dbus-l10n
• drop-dead-css
• drop-deviceselection
• drop-jsdoc
• drop-local-web-ui-path
• drop-model-lists
• drop-registration-alert
• drop-registration-alert-i2
• drop-scope
• drop-typedoc
• drop-unused-module
• drop-xf86-packages
• drop_32bit
• drop_network_dbus_leftovers
• dud
• dud-kernel
• dud-support
• dud_repository
• edit-vg
• efi_locale
• empty_search
• enable-agama-scripts
• enable-dbus-monitor-live
• encode_connection_id
• encrypted_password
• env-storage
• esp-id
• eula-support
• expand_search
• expanded_lvs
• expanded_partitions
• explicit_boot_raid_upstream
• export-password
• export-solved-config
• expose-passwords
• extend-transfer-urls
• extended_collected_logs
• fast_rust_unit_tests
• files-service
• files_auto
• files_ay_convertor
• finish-phase
• first_software_fixes
• fix-DOM-nesting-at-login
• fix-actions-handling
• fix-agama-tests
• fix-auth-and-encryption-switches
• fix-autoselected-patterns
• fix-ay-pre-scripts
• fix-bls-config
• fix-bsc-1243415
• fix-converter
• fix-dasd-deactivation
• fix-env-bls
• fix-error-format
• fix-error-reporting
• fix-extensions-layout
• fix-fetch-logs
• fix-firstboot-keymap
• fix-installer-options-form-state
• fix-installer-options-state-sle-16-qu
• fix-isChecked-at-product-selection
• fix-isChecked-prop
• fix-iscsi
• fix-keymap
• fix-keymaps-i18n
• fix-l10n-context
• fix-label-product-selection
• fix-lang-conversion
• fix-language-change
• fix-list-repositories
• fix-load-translations
• fix-local-web_ui-path
• fix-localectl-mock
• fix-locales-test
• fix-logs-filename
• fix-long-string
• fix-manager-tests
• fix-maring-inline-start
• fix-md-checker
• fix-missing-translations
• fix-network-encoding
• fix-network-method
• fix-network-persist-rc3
• fix-openapi
• fix-openapi-schema
• fix-opening-ssh-port
• fix-overview-and-progress
• fix-overview-and-progress-v2
• fix-packaging
• fix-password-check
• fix-pattern-selection
• fix-post-partitioning-scripts
• fix-prefix-handling
• fix-product-cache
• fix-product-change
• fix-product-change-again
• fix-products-cache
• fix-queries
• fix-questions
• fix-questions-path
• fix-registration
• fix-registration-workflow
• fix-schema
• fix-scripts
• fix-scripts-reader
• fix-selected-product-cache
• fix-services-manager-reader
• fix-set-config-model
• fix-set-keymap
• fix-software-cache
• fix-software-proposal
• fix-software-queries
• fix-storage-tests
• fix-storage-types
• fix-storage-ui
• fix-tests
• fix-transfer
• fix-urls
• fix-user-settings
• fix-users-summary
• fix-ws-connection
• fix_and_validate_JSON_schema
• fix_autoconnect_of_ports
• fix_cmdline
• fix_copy_certificates
• fix_delete_bridge
• fix_gpg_callbacks
• fix_icewm_setup
• fix_install_url
• fix_kernel_filtering
• fix_multipath_env
• fix_product_selection
• fix_products_spec
• fix_repo_copy
• fix_resolv_conf
• fix_startup_1
• fix_storage_config
• fix_unattended_rmt
• fix_user_import
• fix_web_build
• fix_web_pot_sle16
• fix_wpa_eap_suite_b_192
• focus-login-password-field
• force-sizes
• fork-ts-checker-webpack-plugin
• generate_pvs
• gh-2647
• gitignore_openapi
• hackweek-ancor
• hackweek-config
• hardware_types
• hashed_pasword
• hide-passwords
• hide_abort_option
• hostname-ui
• hostname_handling
• hot-fix-start-progress
• huha-fix-example
• i18n_web_refactoring
• ibft-yast-iscsi
• ignore_not_existing_active_connection
• immutable_info
• immutable_proposal
• import-autoyast-scripts
• import-ssl-certs
• improve-events
• improve-issues
• improve-logging
• improve-partition-form
• improve-reboot-feedback
• improve_logging
• improve_zypp_callbacks
• info_param
• inhibit
• insecure-users-crate
• install
• install_addon_products
• install_dir
• installation_failed_ui
• installation_finished_tpm
• integrate_agama_zypp
• interactive_network_config
• invalid-locale
• ipmi
• ipmitool-fix-percent
• is-waiting-deferred
• iscsi-api-v2
• iscsi-discovery
• iscsi_target_names
• iso_label
• issue-2539
• issue-2662-fix-example-file
• issue-reorg
• json_devicegraph2
• kalpa
• keymap-only-local-connection
• kiwi-use-default-ruby
• l10n-service
• lang-and-keyboard-improvements
• leapmicro
• libzypp-errors
• libzypp_timeout_retry
• licenses-openapi
• licenses-translations
• limit_build_jobs2
• link_resolv
• live_build
• live_shellcheck
• llvm_tarpaulin
• locale-packaging-conflict
• localize-products-description
• log-failure-details
• log-progress-changed
• log_errors
• logs_api
• lsm_select
• lvm-form
• lvm_assembly_fix
• mac_address
• manager-service
• master
• merge-SLE-16
• merge-api-v2
• merge-master
• merge-sle-16
• merge-sle16
• merge_api-v2
• merge_api_w2
• merge_leap16
• merge_leap_16.0
• merge_master_reg
• merge_rc3
• missing_textdomain
• missing_translations_SLE16
• missing_translations_master
• modes-improvements
• monitor
• more-reproducible
• more_options
• move_to_json
• network-binding-improvements
• network-persistent-connections-handling
• network_dhcp_settings
• network_settings_optional
• network_startup_install
• network_state_fixes
• new-issues-api
• new-questions
• new_api_save_logs
• new_auth_model
• new_gettext_sle16
• new_libzypp_callbacks
• nm_autoconnect
• no-client
• no_more_fake_raids
• no_warning_on_skip
• non-blocking-issues
• non-blocking-progress
• nonEFI-fix
• noto-sans-as-fallback
• online_demo
• only_candidates
• only_required
• only_required_sles
• only_required_sles_test
• only_resize_existing
• openapi
• openapi-scripts
• optional-ipconfig-vectors
• out-of-sync-toast
• patch-product-selection
• patternfly-6
• pfv6-round-1
• pfv6-round-3
• plural-form
• po_merge_17888380480
• po_merge_18068702331
• po_service_merge_17888381247
• po_service_merge_18068703236
• post-partitioning-scripts
• post_install_fix
• pre-scripts
• preselect-selinux
• preserve-ay-pre-scripts
• probe_agama_proposal
• product-registration
• product-selection-form-fixes
• product_fix
• product_registrion_poc_fix
• products_po_merge_sle16_17523186155
• profile-checker
• profile-help-typo
• profile_client
• proxy_setup
• query-key-factories
• question-ids-and-labels
• questions-config
• radashi
• raid_editor
• ratatui-monitor
• rc1
• rc1-fix-product-change
• rc3
• rc3-sync
• react-router-v7
• readable-test
• reboot
• reduce_retries
• register_addons
• registration-error
• registration-summary
• registration-url
• registration_crate
• registration_finish
• relative-urlref-files
• relax_dependencies
• release-12
• release-15
• release-16
• release-17
• release-18
• release-19
• release-api-v2
• rellocate-install-tooltip
• remote-config-edit
• remove-dbus-users
• remove-fixme
• remove-setxkbmap
• rename-navigation-to-install-button
• rename_cmdline_args
• reorder_storage_ui
• replace_software
• repo_gpg
• repository_retry
• reprobe
• reprobe_button
• requires_only_flag
• rescan-devices-progress
• reset_bootloader_cache
• reset_resolvables
• rethinking-encryption-layout
• retry-error
• retry_registration_cli
• revam-iscsi-ui-draft
• revert-eslint-removal
• revert-unsigned-repo
• rework-installation-progress
• rework-users
• rmt_extension_fix
• rmt_registration
• rmt_registration_fix
• rubygem-subpackage
• run-chrooted-scripts
• run-init-scripts
• rust-translations
• rust_ci
• rust_faster_ci
• rusty-manager
• scc-proxy
• schema-URL
• schema-p1
• search_sort
• security_adapt
• security_callbacks
• select-packages
• select-packages-proposal
• select-raid
• self-update-fallback
• selinux_fix
• show-config
• single-product-init
• sle-16
• sle-16.1
• sle16-backport-fixes
• soft-ser_merge_master
• software-default-answer
• software-probe
• software-service
• software-service-api-v2
• software-service-boost-1
• software-service-cleanup
• software-summary-issues
• software_no_proposal
• software_service_queries
• software_solve_commit
• software_summary_screen
• software_test_robust
• sort-l10n
• sorted-products
• spaces_in_translations
• split_storage_finish
• sshKey
• storage-add-partition
• storage-boot-model
• storage-config-model
• storage-config-null
• storage-config-to-json
• storage-config-ui
• storage-config-ui-encryption
• storage-config-ui-master-sync-20250128
• storage-config-ui-merge-master
• storage-config-ui-show-result
• storage-config-ui-sync-20250219
• storage-config-ui-sync-master-20250121
• storage-configurator
• storage-edit-partition
• storage-fix-conversions
• storage-fixes
• storage-fs-label
• storage-generate-pvs
• storage-inhibitors
• storage-label-improvements
• storage-layout-cases
• storage-lvm
• storage-missing-config
• storage-new-api
• storage-new-api-ags8
• storage-new-api-schema1
• storage-new-api-schema2
• storage-refinements-jun-25
• storage-reload
• storage-reprobe
• storage-reset-config
• storage-schema-index
• storage-selector
• storage-selector-ancor
• storage-selector-new
• storage-set-config-model
• storage-show-config
• storage-show-vgs
• storage-ui-new-api
• storage-volume-keywords
• storage_merge_master
• storage_reprobe_fix
• store_no_product
• switch-to-wayland-and-gnome-shell
• sync-SLE-16
• sync-api-v2
• sync-api-v2-again
• sync-branch
• sync-queries
• systemd_link
• test_fix_rust
• threaded_zfcp
• timeout-stop-on-boot-menu
• timeout_and_retry
• tpm_pbkdf
• translate-mode
• translate_scc_messages
• translated_string
• try_ibft_reorder
• try_ibft_reorder_master
• typo
• ui-fixes
• ui-format-device
• ui-improvements-202410
• ui-progress
• ui-size-improvements
• ui-sync
• ui_event_handling
• ui_password_check_drop
• unattended_multipath
• unselect_patterns
• unsigned-repo
• update-autoyast-compat
• update-deps-20250603
• update-deps-20250825
• update-outdated-pages
• update-spec-files
• upg-rust-deps
• use-full-repo
• user-pw-check
• user_patterns_selection
• user_repo_ay_convert
• users-install-msg
• users_mandatory_step
• users_service
• users_v2_webui
• v11
• v12
• v13.pre
• v15
• v16
• v17
• v18
• v18.pre
• validation
• version_18.pre
• vlan_support
• web-ui-2026
• wip/honyczek/storage-autosizetext
• workaround_empty_proposal
• xtask
• zFCP_refresh
• zbus-5
• zfcp_unattended

Build # 11330201026

Build Type

Pull #1668

github

Committed by web-flow

Commit Message

Merge c26892217 into 0c3c8b5a6

Pull Request Pull Request #1668: fix(service): Fixed shell injection vulnerability in the internal API

Run Details

2 of 2 new or added lines in 1 file covered. (100.0%)

13 existing lines in 1 file now uncovered.

16094 of 22679 relevant lines covered (70.96%)

33.58 hits per line